user rights assigment